A supply chain is the movement of materials as they move from their source (raw materials) through manufacture to the end customer.
A supply chain can include materials acquisition, purchasing, design, manufacturing, warehousing, transportation, customer service, and supply chain management. It requires people, information and resources to move a product from manufacturer to supplier to customer.
Every supply chain carries some risk which may include product protection; counterfeit products and goods and defective products. ICT supply chains are invariably global and complex, with multiple manufacturers, transport organisations, sales, support and other organisations in the supply chain.
Supply chain risks should be incorporated into an agency’s assessment of risk and the Security Risk Management Plan (SRMP).
Identified risks should then be managed through the procurement process and through technical checks and controls.